Privacy Notice
1. Who is responsible for your data
This Privacy Notice explains how Emergent Intelligence Group LLC (“EIG”, “we”, “us”), the owner and operator of Virtaire at virtaire.com, collects, uses, shares and protects personal information. EIG is the data controller for the Service. Contact: Emergent Intelligence Group LLC, c/o Corporate Service Center, Inc., 15500 Voss Rd, Ste 425, Sugar Land, Texas 77498, United States; info@emergentintelligencegroup.com.
This Notice applies to the Virtaire website, application and related communications. It does not apply to the third-party sites we link to or to the practices of your MLS, brokerage or the platforms where you publish your videos.
2. Information we collect
2.1 Information you give us
| Category | Details |
|---|---|
| Account information | Email address, name, password (stored only as a salted cryptographic hash), account role, and — if you use Google sign-in — the Google account identifier linked to your account. ChatGPT sign-in provides your ChatGPT user identifier, email and name. |
| Order information | Property address, listing page URL (if you provide one), selected package and options, room notes and captions, song brief, revision instructions, quoted and paid amounts, and order status history. |
| Agent branding | Agent name, title, phone number and brokerage name that you choose to place on the branded edition of your video. |
| Uploaded media | Photographs (individually or as a ZIP archive), single photos for animation, and — for recovery orders — video clips, audio and archives you supply. Original file names and sizes are retained. |
| Retrieved media | If you give us a public listing URL, we retrieve the listing photos and their captions or alt text from that page. If the page has no photos but has a downloadable video, we extract still frames from that video. |
| Customer record | A studio customer record (name, email, phone, brokerage, order history, follow-up date and support notes) is created automatically from your first order and maintained for support. |
| Communications | Emails or messages you send us, and support notes we keep about your requests. |
2.2 Information created while you use the Service
- Generated media: room labels, staged images, animated clips, music tracks, rendered videos and internal work files created for your order, including superseded versions.
- Processing records: per-order activity events (shown to you on your order page), AI-generation prompts and checkpoints (which include your room notes, style choices and song brief), provider request identifiers and cost receipts, and quality-review attestations.
- Security records: an audit log of account actions (sign-in, password change, account changes, support previews), and short-lived rate-limit counters keyed to a one-way hash of your IP address or email. We do not store your IP address in clear text, your user agent, device fingerprint or precise location.
- Payment records: the Stripe Checkout session identifier and Stripe event identifiers for your order. We never receive your full card number.
2.3 Information we do not collect
We do not run third-party analytics, advertising pixels, tag managers or social-media trackers. We do not collect date of birth, government identifiers or financial account numbers. Photos are re-encoded and scaled to at most 2048 pixels on the long edge at intake, and we strip EXIF metadata (including GPS location) from every photo before it is used for room recognition, generation or rendering, and from every delivered video. Original uploaded files are stored as received and may still contain embedded metadata until deleted.
2.4 Information about other people
Listing photos may incidentally show people, personal belongings, documents or other private details. We do not detect, blur or remove them. You must have the right to use any photo you upload (see the Terms). Do not upload photos containing information you are not permitted to share.
3. How we use information
- To create and secure your account and authenticate you.
- To quote, produce, review, deliver and support your orders, including sending your photos and instructions to AI providers to generate motion, staging, captions and music.
- To render your agent branding into the branded edition of your video, and the property address into download file names.
- To process payments and prevent fraud and abuse, including rate limiting.
- To send transactional email (verification and password-reset links). We do not send marketing email unless you opt in.
- To maintain a customer record for support and order history.
- To investigate failures, recover stuck orders, reconcile provider costs and keep audit records.
- To comply with law and enforce our Terms.
We do not use your photos, videos or order data to train AI models, and we do not sell or rent personal information.
4. Who we share information with
| Recipient | What they receive and why |
|---|---|
| Cloudflare | Hosts our website, database and media storage. All account, order and media data is stored on Cloudflare infrastructure. |
| OpenAI | If you use ChatGPT sign-in, provides your ChatGPT identity to us. |
| xAI | Receives metadata-stripped working copies of your listing photos (reduced to 768 px for room recognition; up to 2048 px for staging, animation and close-ups) together with generation prompts that include your room notes, style and theme choices, revision instructions and close-up directions, to produce staged images and video clips. Pan + zoom films send no photos to xAI; room recognition for those films still does. |
| ElevenLabs | Receives your song brief text (not your photos) when you order a custom song. |
| Stripe | Receives your email address, the order identifier, amount and product description to run checkout, and collects your payment details directly on its hosted page. |
| If you use Google sign-in, Google authenticates you and returns your Google identifier, email and name. | |
| Resend | Delivers verification and password-reset emails (recipient address and the link). |
| Rendering infrastructure | Our rendering worker (currently operated by us, and which may be hosted on Railway or a similar provider) receives your order record (address, options, notes and agent branding) and photos, generates and assembles your videos and uploads the results. |
| Listing websites | If you supply a listing URL, that website sees our request to retrieve the page and its public images. |
| Professional advisers, successors, authorities | We may disclose information to lawyers, accountants and insurers under confidentiality; to a successor in a merger, acquisition or asset sale; or where required by law, subpoena or to protect rights, safety or the integrity of the Service. |
Our staff and contractors with an administrator role can view orders, uploaded and generated media, agent branding, customer records and audit logs as needed to produce and support orders. Administrators can open a time-limited, read-only view of your order page for support; each such preview is recorded in our audit log.
5. Cookies
We use only strictly necessary cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
lvs_session | Keeps you signed in. HttpOnly, secure. | 8 hours, or 30 minutes of inactivity |
lvs_google_state | Protects the Google sign-in handshake against forgery. | 10 minutes |
Stripe sets its own cookies on its hosted checkout page. Our hosting and CDN providers may set cookies or collect connection logs under their own policies. We do not use advertising or analytics cookies, and we do not respond to browser “Do Not Track” signals because we do not track you across sites.
6. How long we keep information
- Account records: for as long as your account exists, and then as described below.
- Orders, uploaded photos, generated media and delivered videos: kept so that you can re-download your videos, order edits or retakes, and so we can support recovery of your order. We currently retain order media for at least 12 months after delivery, after which we may delete source uploads, intermediate files and superseded versions. Delivered videos remain available while your account is active.
- Payment and accounting records: retained as required for tax and accounting purposes (generally 7 years).
- Audit logs and processing receipts: retained for security, dispute and provider-reconciliation purposes.
- Security tokens: sign-in sessions expire after 8 hours; email verification and reset links after 30 minutes; sign-in state after 10 minutes; rate-limit counters after 15 minutes.
When you ask us to delete your account or an order, we delete or de-identify the associated personal information and media within 30 days, except for information we must keep for legal, accounting, fraud-prevention or dispute purposes, and copies in backups that are overwritten in the ordinary course. Third-party providers retain data they received under their own policies (Section 8).
7. Your choices and rights
- Access, correction, deletion, portability: email info@emergentintelligencegroup.com from the address on your account. We will verify your identity and respond within 45 days (or the shorter time the law requires). Self-service account and order deletion is not yet available in the app; requests are handled manually.
- Marketing: we do not send marketing email by default. If we introduce it, every message will include an unsubscribe link.
- Sign-in choices: you can use email/password instead of Google or ChatGPT sign-in.
- Branding: the agent name, title, phone and brokerage are optional (brokerage is required only if you supply a name or phone) and appear only on the branded edition.
State privacy rights
Residents of Texas, California, Colorado, Connecticut, Virginia, Utah, Oregon and other states with consumer privacy laws may have rights to confirm processing, access, correct, delete and obtain a copy of their personal data, to opt out of targeted advertising, sale or profiling, and to appeal a denied request. We do not sell personal data, engage in targeted advertising or profile you for decisions with legal effects. To exercise a right or appeal a decision, email info@emergentintelligencegroup.com with the subject line “Privacy request.” You may also submit a complaint to your state attorney general. We will not discriminate against you for exercising your rights.
Outside the United States
The Service is operated from the United States and intended for U.S. real estate professionals. If you access it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. Where the EU/UK GDPR applies, our legal bases are performance of a contract (providing the Service), legitimate interests (security, support, improvement) and consent (where required), and you may contact us to exercise your rights or lodge a complaint with a supervisory authority.
8. Third-party AI providers and your media
Generative steps are performed by third-party AI providers under their API terms. We request that providers not retain data beyond what is needed to complete the request where their API allows it, and we send only what is necessary for each step. However, providers may temporarily store inputs and outputs for abuse monitoring and service operation under their own policies. Those providers’ current API terms govern how long they keep that data and whether they use it to train models. Do not upload photos containing information you would not want processed by these providers.
9. Security
We protect information with encryption in transit (HTTPS), password hashing (scrypt), HttpOnly and secure session cookies, server-side authorization on every media download (only the order owner or an administrator can access order files), encrypted storage of provider credentials, signed payment webhooks, cross-site request protections and rate limiting. Delivered videos are streamed privately and are never published to a public URL by us. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.
10. Children
The Service is for adults (18+) and is not directed to children under 13 or, where applicable, under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11. Changes to this Notice
We may update this Notice. The effective date at the top shows the current version. Material changes will be posted on the Site and, where appropriate, emailed to account holders. Continued use after the effective date means you accept the updated Notice.
12. Contact
Emergent Intelligence Group LLC
c/o Corporate Service Center, Inc., 15500 Voss Rd, Ste 425, Sugar Land, Texas 77498, United States
info@emergentintelligencegroup.com